pdf-reader-mcp

The `resolvePath` function in `src/utils/pathUtils.ts` and the `README.md` explicitly permit and encourage the use of absolute paths (e.g., `C:\path\to\file.pdf` or `/home/user/file.pdf`). Additionally, for relative paths, `path.resolve(process.cwd(), userPath)` is used without further validation to prevent directory traversal (`../../`). This means an AI agent, if compromised or instructed to do so, could read *any* file on the host machine's filesystem where the server is running, bypassing the stated "Secure Context" and "Context Confinement" design principles. This is a critical security vulnerability. Users *must* run this server with extremely restrictive filesystem permissions for the Node.js process and be aware that an agent can request any file via an absolute path. The server also makes external network requests for URL-based PDFs, which could be a risk if untrusted URLs are processed.